Husho Privacy Policy
Effective from 28 October 2026.
1. Data controller
- The controller of personal data is Husho (the "Seller").
- Questions about personal data can be sent to hello@husho.app.
- This policy covers the Husho app, the husho.app website and the people who use them (the "User").
2. Data that stays on the Mac
- Recordings, transcripts, notes, summaries, AI chat conversations and files added to the Library are processed only on the User's Mac. The Seller has no access to them.
- The app does not send this data to the Seller or to the cloud, and it does not collect data on how the app is used.
- A diagnostics file created in the app contains no meeting content unless the User chooses to include it. The app never sends the file itself; sending it to the Seller is entirely up to the User.
3. When the app connects to the internet
- On first launch, the app downloads AI models from Hugging Face.
- At most once a day, it downloads the latest summary templates from husho.app, sending the Mac's hardware identifier, the app version and, after purchase, the license key.
- Once a month, it confirms the license with husho.app.
- It checks for updates, if this option is turned on in the app settings.
- It downloads web pages that the User adds to the Library, directly from those pages.
Meeting content is never sent in any of these connections. The same list is shown in the app settings, under "When Husho connects to the internet".
4. Data processed by the Seller
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| Mac hardware identifier (stored as a hash), app version, trial dates | One trial per Mac, delivering templates | Art. 6(1)(b) and (f) GDPR | As long as needed to ensure one trial per Mac |
| Email address, order details, license key, assigned Macs, transfer history | Delivering the license, activation, transfers and key recovery | Art. 6(1)(b) GDPR | For the life of the license, then until claims are time-barred |
| Name or company name, address, tax ID | Issuing invoices | Art. 6(1)(c) GDPR | For the period required by tax law |
| Payment details | Processing payments | Art. 6(1)(b) GDPR | Processed by Stripe; the Seller has no access to full card details |
| Messages and attachments sent | Replies, technical support, complaints | Art. 6(1)(b) and (f) GDPR | Until the matter is closed |
| IP address and technical connection data | Security and operation of the services | Art. 6(1)(f) GDPR | As long as needed for security |
| Website visit statistics | Improving the website | Art. 6(1)(a) GDPR (consent) | According to Vercel Analytics policies |
| Advertising identifiers, pages visited, IP address and browser data | Measuring Google Ads campaign performance, without ad personalization | Art. 6(1)(a) GDPR (consent) | According to Google's policies |
The Seller's legitimate interests are ensuring one trial per Mac, keeping the services secure, and handling messages and claims. Providing data is voluntary, but it is required to use the trial and to buy and activate a license.
5. Recipients
Data is shared only with companies that help the Seller provide the services:
| Company | Role |
|---|---|
| Vercel Inc. | Website and license server hosting, visit statistics |
| Google (Google Ads) | Advertising campaign measurement, with the User's separate consent |
| Neon Inc. | License and order database |
| Stripe Payments Europe Limited | Payments |
| Resend | Sending emails |
| Cloudflare Inc. | Distributing installers and updates |
Data may also be received by the domain and email provider, the accounting office and public authorities where the law requires it. Some of these companies are based outside the European Economic Area, mainly in the United States. In those cases data is transferred on the basis of a European Commission adequacy decision or standard contractual clauses.
Hugging Face and web pages added to the Library receive only connection data, such as the IP address, when content is downloaded.
6. User rights
Every person whose data is processed has the right to:
- access their data and receive a copy,
- have their data corrected,
- have their data erased, except data the Seller must keep by law, such as invoices,
- restrict processing,
- data portability,
- object to processing based on the Seller's legitimate interests,
- withdraw consent at any time, without affecting the lawfulness of earlier processing,
- lodge a complaint with a data protection authority, in Poland the President of the Personal Data Protection Office (uodo.gov.pl).
Requests can be sent to hello@husho.app. The Seller replies within one month.
The app automatically checks the trial and the validity of the license. Any error in such a check can be reported to hello@husho.app and is reviewed by a person.
7. Security
- Connections between the app, the website and the Seller's servers are encrypted (HTTPS).
- Licenses are cryptographically signed.
- Mac identifiers are stored in the database only as a hash.
- Using Husho requires no account or password.
8. Cookies
The use of cookies and similar technologies is described in the Cookie Policy.
9. Changes to this policy
The Seller announces significant changes to this policy on husho.app and, where the email address is known, by email.